Rujukan Laman

How twin88 Protects Your Information

We collect only what we need to run your account, process your withdrawals via Touch 'n Go, GrabPay, Boost dan FPX, and keep the lobby secure.

Minimal data collectionSecure storageYour access rightsDeletion on request
twin88 How twin88 Protects Your Information
REACH OUR TEAM

Privacy Questions? We're Here to Help

If you want to see what data we hold, correct a mistake, or ask us to delete your account and everything in it, our support team will walk you through the steps.

Live Chat Open the chat bubble in the bottom right corner of any page and type your question. Our team is online daily from 09:00 to 01:00 Malaysia time, and response usually arrives in under three minutes. Mention that your question is about privacy or data access so we route it to the right specialist.
Email Send your request to [email protected] with your registered email address and account username. Attach a copy of your ID if you're asking us to delete your account or send you a full data export—we need that proof to protect your information from someone else making the request.
Help Center Check the Privacy & Account section in our help center for step-by-step guides on downloading your data, updating your contact details, opting out of marketing, and closing your account. Every guide includes screenshots so you know exactly which buttons to press, and each one takes less than five minutes to complete.
HOW WE HANDLE IT

Data Security, Retention, and Your Rights

We encrypt your password with bcrypt, store payment tokens on PCI-compliant servers, and log every login so we can spot suspicious activity.

Encryption at Rest

Your password is hashed with bcrypt before it touches the database, and sensitive fields—date of birth, phone number, withdrawal history—are encrypted with AES-256. Even if someone walked out with a backup drive they couldn't read your details without the key, which lives on a separate system and rotates every quarter.

Session Security

When you log in we issue a token that expires after four hours of inactivity. If you tick "Remember me" the token lasts thirty days, but logging in from a new city or device triggers an email alert and asks you to confirm it's really you before the session starts.

What We Keep

We hold your account details, deposit and withdrawal records, game history, and support chat logs. Bet and round data stays on file for one year to resolve disputes; after that we keep only aggregated statistics with no personal identifiers. If you close your account we delete your email, phone, and document scans within ninety days.

Cookies and Tracking

Essential cookies remember your login and currency choice; analytics cookies count visits to each game lobby and help us decide which slots to promote. You can block the analytics tier in your browser or account settings without losing any lobby features. We don't use third-party ad trackers or social-media pixels.

Access and Correction

Email [email protected] to request a copy of everything we hold. You'll get a JSON file within forty-eight hours showing your account details, transaction history, and the dates we collected each piece. If something is wrong—old phone number, misspelled name—reply with the correction and we'll update it the same day.

Deletion and Portability

Close your account in settings or ask support to do it for you. Once closed, we stop all marketing, lock the account so no one can log in, and queue your personal data for deletion. The ninety-day window lets us handle any pending withdrawals or disputes; after that your email, phone, and ID scans are gone for good.

Privacy Policy FAQ

We ask for your full name, email address, phone number, date of birth, and your preferred currency. Payment method details—Touch 'n Go wallet, GrabPay mobile, Boost account, or FPX bank—are entered at deposit time and stored in tokenised form so we never see your full bank credentials.

Personal identifiers—email, phone, document scans—are deleted ninety days after account closure. Transaction records stay on file for three years to meet financial record-keeping rules, but your name and contact details are removed from those records after the ninety-day window ends.

Yes. Email [email protected] from your registered address and we'll send you a JSON export within two business days. It includes your account profile, deposit and withdrawal history, game-round records, and every support conversation. If you want it in a different format let us know in the request.

We share transaction details with Touch 'n Go, GrabPay, Boost, and FPX so they can process your deposits and withdrawals. We also report aggregated statistics to game studios—how many rounds were played, total stakes—but those reports contain no personal identifiers. We don't sell your data to marketing firms or data brokers.

Essential cookies store your login token and language preference; you can't disable those without losing the ability to stay logged in. Analytics cookies track which games you open and how long you stay, and you can switch those off in account settings or your browser. We don't use advertising or social-media tracking cookies.

Click the unsubscribe link at the bottom of any marketing email, or log in and turn off promotional messages in your account notification settings. The change takes effect immediately, though you'll still receive transactional emails—withdrawal confirmations, password resets, security alerts—because those are part of running your account.

We log every login with timestamp, IP address, and device type. If someone tries to log in from a new location or device you'll get an email alert and the session will be paused until you confirm it. If we see a withdrawal request that doesn't match your usual pattern we'll ask you to verify it via email or live chat before releasing the funds.